General

  • Target

    JaffaCakes118_7e088c9d02c3e64b4750bc2ae2f78e1c882595037aca4569ab3163bf468f394c

  • Size

    184KB

  • Sample

    241230-31l1zsxqdz

  • MD5

    1f80f142578ecabc17cc58832edbc35f

  • SHA1

    da05c55f181b0a9db3bd806f88ff82c1812aaebc

  • SHA256

    7e088c9d02c3e64b4750bc2ae2f78e1c882595037aca4569ab3163bf468f394c

  • SHA512

    a619e5b14a1650f0a6b8c4ef131098ddb2852f00cdbf6f0f4b563c219deb3792ad9935babd134c0a3351a81b9bb3570642b74163e0c5864cb5e735d425a52c90

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7e088c9d02c3e64b4750bc2ae2f78e1c882595037aca4569ab3163bf468f394c

    • Size

      184KB

    • MD5

      1f80f142578ecabc17cc58832edbc35f

    • SHA1

      da05c55f181b0a9db3bd806f88ff82c1812aaebc

    • SHA256

      7e088c9d02c3e64b4750bc2ae2f78e1c882595037aca4569ab3163bf468f394c

    • SHA512

      a619e5b14a1650f0a6b8c4ef131098ddb2852f00cdbf6f0f4b563c219deb3792ad9935babd134c0a3351a81b9bb3570642b74163e0c5864cb5e735d425a52c90

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks